APT / THREAT GROUP

Virus-Encoder

aliases

Intelligence Profile

Ransomware

Threat Analysis

Virus-Encoder is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://www.welivesecurity.com/2016/11/24/new-decryption-tool-crysis-ransomware/

→http://media.kaspersky.com/utilities/VirusUtilities/EN/rakhnidecryptor.zip

→http://www.nyxbone.com/malware/virus-encoder.html

→http://blog.trendmicro.com/trendlabs-security-intelligence/crysis-targeting-businesses-in-australia-new-zealand-via-brute-forced-rdps/

→https://www.ransomlook.io/group/crysis

→https://www.bleepingcomputer.com/news/security/crysis-ransomware-master-decryption-keys-released/

→https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/crysis-ransomware-distributed-through-remote-desktop-services

→https://securelist.com/crysis-ransomware/78775/

→https://www.nomoreransom.org/en/decryption-tools.html

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

Virus-EncoderCrySiS

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Virus-Encoder